spr-networks/bitchat-plugin

• Repository: https://github.com/spr-networks/bitchat-plugin
• Commit: 9e366c497fc860c58ee756347ca03ad3225cd127
• Generated: 2026-11-13T23:50:35+00:00
• Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

AI provenance

No AI attribution or AI-consistent velocity signals detected.

• Explicitly attributed share (lower bound): 0.0%

• Unattributed share in AI-consistent velocity bursts: 0.0%

• Estimated AI-generated share: 0.0%

• Stylometry index: 1.32 per 1,000 lines (narrated steps 1, placeholders 0, assistant phrasing 0, emoji 22). Reported as a signal, not scored.

Evidence

• step-by-step narration comment: // First, try to parse as a packet to check message type (src/mesh/blu)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is weak: test-to-source ratio 0.08, no CI test run detected; 40% of function code in complex or long functions; 5% duplicated lines. Weakest area: complexity.

• Functions: 291; mean complexity 4.5, 90th percentile 7; 13 complex and 5 long functions
• Duplicated lines: 5.2% of 6,277 compared
• Tests: 715 test lines for 9,067 source lines (ratio 0.08); CI test commands: none detected; 33% of recent source commits also change tests
• Docs missing or thin: contributing, changelog

Most complex functions:

• run_app in src/main.rs: complexity 227, 1398 lines
• process_packet in src/mesh/packet_processor.rs: complexity 55, 130 lines
• render in src/tui/widgets/sidebar.rs: complexity 49, 166 lines
• to_binary_payload in src/model/bitchat_message.rs: complexity 40, 72 lines
• from_binary_payload in src/model/bitchat_message.rs: complexity 37, 104 lines

Security

Security posture is adequate: 11 known vulnerabilities in 10 dependencies; 1 high-severity SAST findings. Weakest area: posture.

• Known vulnerabilities: 11 in 10 packages (critical 0, high 1, medium 3, low 1)

• Posture checks passed: signed commits, lockfiles; missing: security policy, dependency updates

Top findings

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

• Source lines: 9,067; test lines: 715